Issues

• [作業] OWASP DevSecOps Guideline の段階ごとに、勧める対策を MUST / SHOULD / COULD で決め、ツールの候補を出す

  area:guidearea:planningtype:task
  codeforjapan/code4security#21 · Filter by author yu23ki14 opened on Oct 19, 2026

• [作業] weekly-security-checker を checker/ に取り込む

  area:checkertype:task
  codeforjapan/code4security#18 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める
  

• [作業] first-security-checkup を guide/ に取り込む

  area:guidetype:task
  codeforjapan/code4security#17 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める
  

• [作業] THREAT_MODEL.md の構造を確かめ、ADR 0009 を直す

  area:guidetype:task
  codeforjapan/code4security#16 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [作業] CONTRIBUTING をリポジトリ全体向けに書き、ラベルと CoC を置く

  area:planningtype:task
  codeforjapan/code4security#15 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める
  1

  

• [作業] このリポジトリの守りの最低限を入れる

  area:repo-securitytype:task
  codeforjapan/code4security#14 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める
  

• [論点] Phase 0 が遅れたときに落とす順位と、判断日を決める

  area:planningtype:decision
  codeforjapan/code4security#13 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [論点] checker の action の形を決める

  area:checkertype:decision
  codeforjapan/code4security#12 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [論点] 設定を「写す」か「参照させる」かの線引きと、対応するエージェントの範囲を決める（ADR 0004）

  area:plugintype:decision
  codeforjapan/code4security#11 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [作業] CyberRiskScape の作者に連絡し、連携できる形を聞く

  area:guidetype:task
  codeforjapan/code4security#10 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [作業] LICENSE を置き、パスごとのライセンス表示を入れる

  area:planningtype:task
  codeforjapan/code4security#9 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める
  

• [論点] CLI・Strix / CAI・トリアージ・OWASP / IPA マッピングを v1 で扱うかを決める

  area:planningtype:decision
  codeforjapan/code4security#8 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [論点] 実装の言語を TypeScript にそろえるかを決める

  area:checkerarea:guidearea:plugintype:decision
  codeforjapan/code4security#7 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める
  1

• [論点] v1 の対象範囲を決める

  area:planningtype:decision
  codeforjapan/code4security#6 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [論点] v1 をコーディングエージェント前提にするかを決める

  area:planningarea:plugintype:decision
  codeforjapan/code4security#5 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める

• [論点] 成功指標を「導入できた数」と「N ヶ月後も回っている数」のどちらで測るかを決める

  area:planningtype:decision
  codeforjapan/code4security#4 · Filter by author yokinist opened on Oct 18, 2026 · Phase 0: 土台を固める